Abstract:Byzantine-robust federated learning (FL) endeavors to empower service providers in acquiring a precise global model, even in the presence of potentially malicious FL clients. While considerable strides have been taken in the development of robust aggregation algorithms for FL in recent years, their efficacy is confined to addressing particular forms of Byzantine attacks, and they exhibit vulnerabilities when confronted with a spectrum of attack vectors. Notably, a prevailing issue lies in the heavy reliance of these algorithms on the examination of local model gradients. It is worth noting that an attacker possesses the ability to manipulate a carefully chosen small gradient of a model within a context where there could be millions of gradients available, thereby facilitating adaptive attacks. Drawing inspiration from the foundational Shapley value methodology in game theory, we introduce an effective FL scheme named CareFL. This scheme is designed to provide robustness against a spectrum of state-of-the-art Byzantine attacks. Unlike approaches that rely on the examination of gradients, CareFL employs a universal metric, the loss of the local model-independent of specific gradients, to identify potentially malicious clients. Specifically, in each aggregation round, the FL server trains a reference model using a small auxiliary dataset- the auxiliary dataset can be removed with a slight defense degradation trade-off. It employs the Shapley value to assess the contribution of each client-submitted model in minimizing the global model loss. Subsequently, the server selects client models closer to the reference model in terms of Shapley values for the global model update. To reduce the computational overhead of CareFL when the number of clients is relatively scaled-up, we construct its variant, namely CareFL+ generally by grouping clients. Extensive experimentation conducted on well-established MNIST and CIFAR-10 datasets, encompassing diverse model architectures, including AlexNet, demonstrates that CareFL consistently achieves accuracy levels comparable to those attained under attack-free conditions when faced with five formidable attacks. CareFL and CareFL+ outperform six existing state-of-the-art Byzantine-robust FL aggregation methods, including FLTrust, across both IID and non-IID data distribution settings.

Fed-Credit: Robust Federated Learning with Credibility Management

Efficient, Private and Robust Federated Learning

FedVal: Different good or different bad in federated learning

CFSL: A Credible Federated Self-Learning Framework

Privacy-Preserving Federated Learning Against Label-Flipping Attacks on Non-IID Data

FedCAP: Robust Federated Learning via Customized Aggregation and Personalization

FedNor: A Robust Training Framework for Federated Learning Based on Normal Aggregation

LF3PFL: A Practical Privacy-Preserving Federated Learning Algorithm Based on Local Federalization Scheme

FedTruth: Byzantine-Robust and Backdoor-Resilient Federated Learning Framework

FedRRA: Reputation-Aware Robust Federated Learning Against Poisoning Attacks.

CRFL: Certifiably Robust Federated Learning against Backdoor Attacks

CVFL: A Chain-like and Verifiable Federated Learning Scheme with Computational Efficiency Based on Lagrange Interpolation Functions

CareFL: Contribution Guided Byzantine-Robust Federated Learning

Privacy-Enhancing and Robust Backdoor Defense for Federated Learning on Heterogeneous Data

FLEDGE: Ledger-based Federated Learning Resilient to Inference and Backdoor Attacks

Robust Multi-model Personalized Federated Learning Via Model Distillation

FLCP: federated learning framework with communication-efficient and privacy-preserving

Evaluating and Enhancing the Robustness of Federated Learning System Against Realistic Data Corruption

FedCL: Detecting Backdoor Attacks in Federated Learning with Confidence Levels

Trustworthy Federated Learning Against Malicious Attacks in Web 3.0

Privacy-Preserving Federated Class-Incremental Learning